General

  • Target

    JaffaCakes118_0b3df9add8d167a1916b79f434e148df

  • Size

    679KB

  • Sample

    250122-hgxyxstngr

  • MD5

    0b3df9add8d167a1916b79f434e148df

  • SHA1

    ce8fc58b195f40215c5592a94a9238d8e55a6acf

  • SHA256

    dbfc2b7e412b207ad508ef0e144f6ccb0982dc3fc6a1a43dc604fe502bd35022

  • SHA512

    63b71a83e321c7105e7ceef18ea5cfa793c1d6f43ea6aa2ceb69d2f09fa3d5984c7982fe9dbb714031a82ca869bf4e532cdf2039117f0777be657df1146f9d27

  • SSDEEP

    12288:FTbNUdZURigKJwg4/Ft46nuQO0lPFJgyS/FJyiTS5:tbmURi5Sg4D4jQ3PFJ4LyiTS5

Malware Config

Targets

    • Target

      JaffaCakes118_0b3df9add8d167a1916b79f434e148df

    • Size

      679KB

    • MD5

      0b3df9add8d167a1916b79f434e148df

    • SHA1

      ce8fc58b195f40215c5592a94a9238d8e55a6acf

    • SHA256

      dbfc2b7e412b207ad508ef0e144f6ccb0982dc3fc6a1a43dc604fe502bd35022

    • SHA512

      63b71a83e321c7105e7ceef18ea5cfa793c1d6f43ea6aa2ceb69d2f09fa3d5984c7982fe9dbb714031a82ca869bf4e532cdf2039117f0777be657df1146f9d27

    • SSDEEP

      12288:FTbNUdZURigKJwg4/Ft46nuQO0lPFJgyS/FJyiTS5:tbmURi5Sg4D4jQ3PFJ4LyiTS5

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks